Add a function for validating payloads from GitHub webhooks

Given a GitHub secret, a payload and the signature delivered with the
payload in `X-Hub-Signature`, verifies if the signature is valid or not.
See issue #76.